7 min read · 12 sources

FinCEN is walking back two of the most aggressive surveillance expansions ever proposed for on-chain finance. The Treasury bureau formally withdrew both its 2023 proposal to label all international crypto mixing a “primary money laundering concern” under Section 311 of the USA PATRIOT Act and its 2020 rule targeting self-hosted wallets.

The shift removes the immediate threat of reporting mandates that would have treated ordinary non-custodial software like suspicious offshore shell banks. FinCEN acknowledged industry pushback warning that sweeping mixing rules would crush legitimate user privacy, citing a July 2025 President’s Working Group report noting legal use cases for transactional shielding.

For developers shipping custody systems, smart contracts, and consumer wallets, the regulatory retreat clarifies operating bounds - even as enterprise platforms consolidate stacks elsewhere.

FinCEN withdrew its 2020 proposal requiring banks and money services businesses to verify identities and keep records on self-hosted wallet transactions above $3,000.

FinCEN drops mixer designations and unhosted wallet recordkeeping

Source: theblock.co ↗

The withdrawal from FinCEN cancels two rulemakings that hung over infrastructure teams for years. The first was the October 2023 proposal under Section 311 that would have required domestic financial institutions to implement sweeping recordkeeping and reporting on any transaction touching an international mixing service. The second was the controversial December 2020 midnight rulemaking that aimed to force money service businesses (MSBs) to verify ownership and log counterparty identity for any transaction to or from a self-hosted wallet exceeding $3,000.

Because neither rule was ever finalized into an administrative order, production compliance obligations do not change: existing Bank Secrecy Act and Travel Rule thresholds remain right where they were. What changes is the architectural risk profile. Had the mixer designation passed, any protocol using zero-knowledge pools or batching relays risked being classified as a laundering pipeline, exposing integrating endpoints to severe liability. FinCEN stated it will continue monitoring illicit flows, but its explicit citation of legitimate privacy protections suggests enforcement will focus on actual threat actors rather than protocols by default.

Henri Stern takes over Stripe's crypto and stablecoin platform

Source: x.com ↗

Privy founder Henri Stern has stepped into an expanded role to lead Stripe’s stablecoin and crypto efforts while continuing to run Privy. The initiative is built around an open, modular stablecoin developer platform designed to unify asset issuance, balance orchestration, embedded wallet onboarding, and physical card issuing into single API flows.

Rather than forcing engineers to wire up isolated microservices, the unified stack stitches together Bridge for asset rails, Privy for auth and key management, Tempo, and Open USD. The production footprint is already handling enterprise-scale routing: Meta runs creator disbursements over the rails, Ramp routes parallel fiat/stablecoin treasury operations, and Deel automates contractor payouts. Stripe’s regulatory footing - combining conditional OCC national bank trust charter clearance with European MiCA and EMI licenses - positions the runtime cleanly for the US GENIUS Act compliance landscape.

Polymarket Protocol V2 unifies positions on ERC-1155

Source: x.com ↗

Polymarket has launched Protocol V2, ditching its legacy architecture built on the 2019 Gnosis Conditional Tokens Framework (CTF). The original setup had become deeply fragmented, requiring bespoke contract layers, wrapping steps, and state tracking whenever new trading mechanics were added.

V1 Architecture:
[User] -> [CTF Wrapper] -> [Multiple Collateral Contracts] -> [Scattered Orderbooks]

V2 Architecture:
[User] -> [Universal Router] -> [ERC-1155 Position Token] -> [OracleAggregator]
                                \_ [Unified pUSD Collateral]   \_ (UMA / Chainlink)

The new core architecture consolidates the state footprint:

• A single ERC-1155 token handles all market positions, allowing token IDs to pack internal market data that can be parsed by an on-chain router.
• A single collateral contract (pUSD) backs settlements across every book.
• One exchange contract serves each market class, spanning binary, atomic negative-risk, incremental negative-risk, and combinatorial engines.
• Resolution routes through an OracleAggregator with swappable modules capable of handling UMA, Chainlink, or custom feeds.

Protocol V2 natively supports cross-chain bridging of collateral, positions, and resolutions. Audited by multiple security firms, the deployment is backed by a $5 million bug bounty.

Zcash NU7 brings 25-second block times to testnet

Source: coindesk.com ↗

The Zcash network activated its NU7 upgrade on the public testnet at block 4,465,026, cutting target block times from 75 seconds down to 25 seconds. The shift drops standard three-confirmation finality latency from 225 seconds down to 75 seconds, materially reducing wait states for exchange deposits and cross-chain messaging.

To prevent the accelerated chain from altering the programmatic ZEC emission curve, NU7 reduces per-block mining rewards to exactly one-third of their prior value. The fee allocation model is also revamped: 60% of all transaction fees are diverted to a long-term mining reserve to support security spend post-halving, while 40% goes directly to the block producer. NU7 completely deprecates Sprout, Zcash’s original 2016 zero-knowledge pool. Node operators running Zakura or Zebra clients must migrate balances and confirm compatibility ahead of a scheduled November 5 mainnet rollout, with developer signoff targeted for October 20.

Chainalysis uses automated graph search on the $387M Bitget exploit

Source: decrypt.co ↗

Chainalysis published details showing how its internal AI tools linked the September 24 Bitget exploit to North Korea’s Lazarus Group, bringing the DPRK’s verified 2026 theft total past $1 billion. Within three hours of compromising Bitget’s infrastructure, the attackers split $387 million across 23 transactions spanning four distinct chains: Ethereum absorbed 49.7%, XRP took 40.8%, Zcash handled 7.6%, and Tron processed 1.8%.

The XRP allocation was routed through decentralized cross-chain liquidity networks, taking 36 hours to systematically wash into native Bitcoin while bypassing centralized exchanges. Chainalysis stated that custom graph-traversal AI models reconciled the cross-bridge transaction hops in under 10 minutes, a workflow that previously demanded 20 or more hours of manual heuristic mapping.

Near Intents reclaims $3.8M following an on-chain deadline

Source: decrypt.co ↗

Near Intents recovered all $3.8 million drained during a cross-chain smart contract breach after General Manager Alex Shevchenko tracked down the exploiter’s origin footprint and issued a 48-hour ultimatum. The vulnerability existed in the interface logic between the platform’s Omni deposit/withdrawal handler and its primary execution contract, forcing Near Intents to briefly pause operations across all 35 connected chains.

The attacker returned the assets in full prior to the deadline, appending a transaction message urging the team to rely on standard bug bounties. The exploit landed only days after the protocol successfully filtered out an incoming $50 million bridge transfer originating from the Bitget exploit.

Ondo introduces pre-IPO equity notes for private AI companies

Source: theblock.co ↗

Ondo Private Markets rolled out tokenized structured notes delivering synthetic price exposure to private, venture-backed companies. The launch begins with an unnamed pre-IPO artificial intelligence firm, with secondary trading running 24/7 on-chain.

The notes do not represent equity, confer no cap-table ownership, and convey zero voting rights. Instead, they are debt obligations issued directly by an SPV, structured to mirror per-share valuations calculated during qualifying liquidity events like IPOs or acquisitions. The offering is open solely to non-US qualified investors, with expansions into cybersecurity, robotics, and biotech slated next. Ondo’s existing tokenized Treasurys and public equities platforms currently secure $3.7 billion in total value locked across more than 1 million unique holders, within a tokenized equity ecosystem that now tops $42 billion in aggregate capitalization.

ZachXBT fronts $350K to compromise laundering networks

Source: theblock.co ↗

Independent investigator ZachXBT revealed he injected 349,700 USDC of personal funds to mount an undercover counter-intelligence operation against an OTC network operating under the alias “Jimmy Green.” The laundering ring has processed more than $1 billion in capital derived from Lazarus operations, including the bulk of the $1.5 billion hack against Bybit.

ZachXBT absorbed an average haircut of 5% per wash cycle to map the counterparties, successfully exposing an on-chain cluster that traced back to $12 million in Bybit exploit reserves. The operational telemetry handed off to law enforcement prompted Tether to freeze 442,000 USDT across the identified routing addresses, lifting ZachXBT’s total facilitated freezes of North Korean funds to $75 million since 2022.

Quick hits: NYSE tokens, atomic L1-L2 execution, and CFTC rules

Source: threadreaderapp.com ↗

• NYSE shares on-chain: OKX and Intercontinental Exchange (ICE) formed a joint venture dubbed OKXICE, filing with the SEC to register and launch tokenized shares for 63 public companies listed on the New York Stock Exchange.
• L1-L2 atomic execution: Ethereum mainnet completed its first atomic transaction coupled directly across an L2 execution environment, enabling cross-layer contract calls inside a single combined state transition without asynchronous relay lag.
• Accounting for card cashback: A new cashback calculator framework audits the hidden costs of advertised 5% crypto debit card rewards, detailing how FX spreads, tiered redemption caps, and staking locks degrade effective net yield down to typical fiat baseline rewards.
• CFTC rulemaking notice: The CFTC issued an Advanced Notice of Proposed Rulemaking (ANPR) soliciting market feedback on margin rules, transaction custody, and exchange registration for commodity-based digital assets.